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In the Claims: 

The Listing of Claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims: 

1 . (Currently Amended) A method for authentication of a user by an authenticating 
entity comprising the steps of: 

the authenticating entity sending a challenge to the user; 
the user adding a spoiler to the challenge; 

the user encrypting the combined spoiler and challenge using a private key of an 
asymmetric key pair; and 

the user sending a response to the authenticating entity in the form of the encrypted 
combined spoiler and challenge,, 

wherein the user sends details of the algorithm used for encryption to the authenticating 

entity . 

2. (Original) A method as claimed in claim 1, wherein the method includes the 
authenticating entity decrypting the encrypted combined spoiler and challenge using the public 
key of the asymmetric key pair and determining if the user has been authenticated. 

3. (Original) A method as claimed in claim 1 , wherein the addition of a spoiler to the 
challenge is carried out by applying a spoiler function to the challenge. 

4. (Original) A method as claimed in claim 3, wherein the form of the spoiler 
function is sent to the authenticating entity. 

5. (Original) A method as claimed in claim 1, wherein the spoiler is added to the 
challenge as a prefix or a suffix and the authenticating entity extracts the challenge by counting 
the number of bytes from the beginning or end of the combined spoiler and challenge. 
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6. (Original) A method as claimed in claim 1, wherein the method includes the user 
obtaining a digest of the combined spoiler and challenge before the step of encrypting. 

7. (Original) A method as claimed in claim 6, wherein the user obtains the digest by 
applying a hash function to the combined spoiler and challenge. 

8. (Original) A method as claimed in claim 6, wherein the user sends details of the 
spoiler and the method of obtaining the digest to the authenticating entity. 

9. (Canceled) 

10. (Original) A method as claimed in claim 8, wherein the authenticating entity 
obtains a digest of the combined spoiler and the original challenge that the authenticating entity 
sent to the user and compares the digest to a digest obtained by decrypting the response from the 
user. 

1 1 . (Original) A method as claimed in claim 1 , wherein the challenge is a bit 
sequence. 

12. (Original) A method as claimed in claim 1, wherein the spoiler is an additional bit 
sequence. 


13-14. (Canceled) 


